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NATIONAL SECliRITY AGENCY 
CENTRAL SECURSTY SERVICE 
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7 June 2006 


MEMORANDUM FOR THE CHAIRMAN, INTELLIGENCE OVERSIGHT BOARD 

THRU: Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT: (U //FOU0 ) Report to the Intelligence Oversight Board on NSA 
Activities - INFORMATION MEMORANDUM 


(U//POUO) Except as previously reported to you or the President, or 
othei^se stated in the enclosure, we have no reason to believe that any intelligence 
activities of the National Security Agency during the quarter ending 31 March 2006 
were uniawTul or contrary to Executive Order or Presidential Directive, and thus 
required to be reported pursuant to Section 1.7.(d) of Executive Order 12333. 


(U//FOUO; The Inspector General and the General Counsel continue to 
exercise oversight of Agency activities by means of inspections, surveys, training, 
review of directives and guidelines, and advice and counsel. These activities and 
other data requested by the Board or members of the staff of the Assistant to the 
Secretary of Defense (Intellig^^ Oversight) are described in the enclosure. 

JPEL F. BRENNER 
' Inspector General - 

'BERT U>ETra 
General Counsel 




(U//FOUO) I concur in the report of the Inspector General and the General 
Counsel and hereby make it our combined report. 

KEITH B. ALEXAI^ER 
Lieutenant General, U. S. Army 
Director, NSA/Chief, CSS 


End: g(pproved for Release bvNSA on 12-19-2014, FOIA Case# 70809 (Litiaationl 

Quartfirly Report 


This Memoraodum is Unciassined 
Up4>n Removal of Enclosure 


DERIVED FROM: NS.VCSSPM 1-S2 
DATED: 23NOVW 
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1. (U) INSPECTOR GENERAL ACTIVITIES 

a. - ffi/ZSI) During this quarter, the Office of Inspector General (OIG) reviewed 
various intelligence activities of the National Security Agency/Central Security 
Service (NSA/CSS) to determine whether they were conducted in accordance with 
applicable statutes. Executive Orders (E.O.s), Attorney General (AG) procedures, 
and Department of Defense (DoD) and internal directives. With few exceptions, the 
issues presented were routine and indicated that the operating elements 
understand the restrictions on NSA/CSS activities. 

b. (U/ /FOUO) NSA OIG inspector s completed an inspection of the ! I tb)(3)-p.L. 86-36 

T on 31 March 2006. The intelligence oversight 

program was found in good order. 

c. (U// P0UO1 Stemmi ng from the NSA OIG special study of th e access to Signal s 

Intelligence (SIGINT) bv l I a review of 

possible E.O. 12333 infractions in areas unrelated to NSA/CSS was conducted 
(report dated 28 February 2006). There were no E.O. 12333 violations or improper 
management in | | action related to the review. 

d. -65^ Last quarter, we rcoortod a lleged misuse of a SIGINT Database by a 

lem olovee (report dated 28 Febiaiarv2006). ThJ^||^| _p ^ 36-36 
incident has been referred to the 1 I OIG for action as deemed appropriate. 

3)-P.L. 86-36 


3)-P.L. 86-36 
3)-P.L. 86-36 
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e special study of tlie NSA/CSS[ 


(b) ( 


I revealed deficient training accountability (report dated 22 August 2005). "The 
ms instituted a formal tracking and follow-up system to ensure training 
iance. 

f. (S//SI//NP) In tlie second quarter of fiscal year 2005 (report dated 17 May 
2005), we reported the misuse of the U.S. SIGINT System. An NSA/CSS OIG 
investigation revealed that an NSA employee had misused the SIGINT system by 
conducting unauthorized electronic surveillance of a non-U.S. person abroad for no 
legitimate foreigi\ intelligence purpose. The matter has been referred to the NSA/CSS 
Office of the General Counsel, for a)nsideTation of referral to the Department of Justice. 

g. (LV/EOUOTAs reported in the fourth quarter fiscal year 2004 (report- dated 
29 November 2004). inspectors fixtitj 

(bC 
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(b) (3)-P.L. 86-36 

i ' O I * I TALLM h;r.VtlOLD;NOrOlll ‘ i. > y202 ‘ j( 123 ' tb) (1) 

(b)(3)-P.L. 86-36 
(b) (3)-50 use 3024(i) 

( land the NSA OIG conducte d a joint inspection of the 

I Action has been completed to 

rectify the weaknesses in their intelligence oversight program documentation. 

h. (S//Si) The OIG reported an investigation of unintentional collection of a TJ.S. 
person in tlie first quart er fiscal year 2004 (see report dated 17 March 2004). From 
I | NSA Signals Intelligence Directorate (SID) targeted the it) (3 )-p.l. se-ss 

communications of a U.S. person located abroad without the required AG 
authorization . As a result of tlie OIG finding of shortcomings in the control 
environment, OIG recommendations for improvement have been implemented. 

2. (U) GENERAL COUNSEL ACTIVITIES 

(C//3I) The NSA/CSS OGC reviewed various intelligence activities of the 
NSA/CSS to determine whether they were conducted in accordance with applicable 
statutes, EOs, AG procedures, and DoD and internal directives. The OGC advised 
Agency elements on a number of questions, including the collection and 
dissemination of c;ommunications of, or concerning U.S. persons; the reporting of 
possible violations of federal criminal law contained in SIGINT product; the testing 
of electronic equipment, and the applicability of the Foreign Intelligence 
Surveillance Act (FISA). With few exceptions, the issues presented were routine 
and indicated that the operating elements understand the restrictions on NSA/CSS 
activities. 


3. (U) SIGINT ACTIVITIES 


a. - ( S tf S I) Collection Against U.S. Persons 
(1) (U) Intentional 


"lb) (1) 

(b)(3)-P.L. 86-36 


a. (TS//Si) During this quarter, the Director, NSA/Chief Central Security 


cu ntv 

Service (DIRNSiVCHCSS) granted approval for consensual collection agai nst I I 
U.S, persons. DIRNSA/GHCSS also approved non-consen.sual collect ion of[ 

U.S. companies openly owned and controlled by foreign governments,[ 


U.S. 


persons known to be agents of a foreign power,! l U.S. citizens taken hostage b 

l l~lu .S. citizens involved in 
an d| P.S. citizen who escaped fromj 


f 


DJRNSA/CHCSS-approved consensual collection, against ] [ Ll.S. persons was 
routinely tenninated this quarter. 

2 
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(b) (3)-P.L. 86-36 
(b) (3)-18 use 798 
(b) (3)-50 use 3024(i) 
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AG granted authority to collect the communications of 


persons overseas during this quarter, 


(2) (U) Unintentional 


a. 4 fi//Sl//hT) T his quarter, there werel linstances in which analysts 
inadvertently collected communications to, from, or about U. S. persons while 
pursuing foreign intelligence tasking. All of the incidents were reported to 
respon.sible oversight officials, and corrective actions were taken. 


asked 


b. A/CSS analysts discovered that a l 

elep hono numbers th at served U. S. persons. The numbers, a 
ng in| I were removed from tasking on| 


iroved for 


( 1 ) 

(b) (3)-P.L. 86-36 
(b) (3)-18 use 798 
(b) (3)-50 use 3024(i) 


b. (U/ /rOU Q) Dissemination of U.S. identities 


(1) (U) intentional 


(a> (.fiZ/Sf) In accordance with section 7 of United States Signals 
Intelligence Directive (USSID) SP0018, U.S. identities were disseminat&d l I 
times during this quarter. The following table shows the justification and the 
number of instances of dissemination, in the “Unmasked by Analyst" column, the 
U.S. identity was revealed in a serialized end product; in the “Unmasked at User 
Request" column, a U.S. identity was released to a user at the user’s request. 


Uhthasked 
by Aiialysf 


Unmasked at 


total 


JUSTIFICATION 


7.2,c Nece'ssarv 


7.2.C.1 Foreign Official 


7.2.C.3 International Narcotics 


7.2.C.4 CtiTninal Activity 


7.2.C.7 U.S. Government Official 


TOTAL 
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(b) (0//SI) While pursuing a foreign target, thef 


1 


address that contained transmissions ol'child pornography. Because of suspected 
criminal activity, the incident is under review by the NSA/CSS OGC for a referral 
determination, 

■(b) (1) 

(b)(3)-P.L. 86-36 

(2) (U) Unintentional 

a. During this qaarter J I SIGINT products were cancelled because 

they contained the identities of U.S. persons, organizations, or entities. In all 
instances, the reports were either not reissued or were reissued with the proper 
miiiimizatioir. 


b. (TS/ZSIZ/NF ) An incident involving the verbal dissemin ation of the na mes 

-^^-5- persons occurred during a mee ting between NSA and ! 

| toNSjJ_ 

wore taken during the meeting, and the^_ 


_No written notes 

Jwere instructed to disregard 


and not share the U.S. person information. 


b) (1) 

(b) (3)-P.L. 86-36 


c. (Oyi'O!) Through telephone communica tion s to and from I 
information was collected and disseminated o n| [ U.S. persons. Th e collection, 

|was < 


V'hich occurred betweeiT 


destroyed onl 


Training was conducted and procedures wer^ developed to meet the 


information need without violating U.S. person privacy. 
d. (TD/ysi//ri^'mELf 


classtfiedL 


imknowingly postedi |U.S. telephone numbers on a 
Once i dentified, the data was removed from th e 
portal. Research indicated that of the {event s 

reported during the above timeframe. telephone numbers froml 


{b){3)-P.L. 86-36 


were not properly minimized by ad 


(b)(1) 

(b)(3)-P.L. 86-36 


(b) (1) 

(b)(3)-P.L. 86-36 
(b) (3)-18 use 798 


(3) (U) Raw Traffic Dissemination — SIGINT Production Chairb) o) -so use 3024 (d 
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(b> (1) 

(b)(3)-P.L. 86-36 



4. (U) Other Activities 

a. (U/ffOUO) Unauthorized Access 


■ ( 1 ) 

(b) (3)-P.L. 86-36 


(.Ta//Sl// N P) With the assistance of the NSA OGC, a | \ 

web site was made compliant with intell igence oversight authorities by restricting 
raw S IGINT access to authorized users. | 1 

I I users outside of the SIGINT production chain had access to the web site. 

which contained metadatal (b)li) 

I (b )^3)-P.L. 86-36 

(b) (3)-50 use 3024(i) 

b. PISA Incidents (b)(3)-p.L. 86-36 

(1) (TO//SI// I'jF) While collecting an FISA Court-authorized target [~ | 

I I an NSA/CSS analyst accessed personal data on U.S. per sons. The incidental 
collection immediately stopped when the error was discovered! | 

.XlifixaJiected data was removed from thel I 


(2) (.T3//9I//I'»lF) i l instances of unintentional collection of U.S. persons 
occurred during this quarter! 


In all cases 


) ( 1 ) 

)(3)-P.L. 86-36 


(b) (1) 

4^)(3)-P.L. 86-36 
'(b) (3)-18 use 798 
(b)(3)-50 use 3024(i) 
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, ‘-^b) (1) 

the collection was deleted, and there were no reports issued as a result of 

collection (3)-i8 use 798 

Lonecuon. (b) (3).-50 USC 3024 (i) 


[ 


inadvertently coUected[ 


J'oulinely seen ini 


were 


] Software in placej^ 


inoditled, tested and verified to recognize all data fields to coirect the problem. 
(4H^B//0I//N'F^ Unaware that a targeted foreigni 


fto)(3)-E>.L. 86-36 
(b)(3)-50 USC 3024(1) 


person on coveragej_ 


JcDpt the targeted 


The Office had not been 


thc^ 


monitoring the collection on a regular basi.s and did not notice that 
I I The number was removed from the FISA 

Court order on 


[ after the error was discovered. However, because 
was also on coverage, the telephone number was then added to 


another FISA order and the collection was not destroyed. 

d. (U) Assistance to Law Enforcement 


.^\h) ( 1 ) 

(b)(3)-P:L. 86-36 


- (S i VSi ^D uring t his quarter, the SID respon ded tol [requests for linguistic 
support and l | for technical assistance fro mi I 

Technical support was also provided once to 


Respectively. 


e. (U) Working Aids 

(1) (U /^''OUQ ^he SID Office of Oversight and Compliance maintains "U.S. 
Identities in SIGINT" and a matrix of dissemination authorities on its web page for 
use by the NSA/CSS Enterprise. The E.O., NSA/CSS Policy Number 1-23, DoD 
Regulation 5240.1-R, and USSID SP0018 are also available on-line. 


an intelligence oversight operating 
instruction that addresse.s roles, responsibilities, raw traffic database access and 


reporting, and developed a working aid to assist \vith[ 


[requests. 


lb)(1) 

b)(3)-P.L. 86-36 
b)(3)-50 USC 3024(1) 
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